$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/898b5fef-13fc-35eb-a5db-3c7042c1d13d.roa File: 898b5fef-13fc-35eb-a5db-3c7042c1d13d.roa (raw, json) Hash identifier: /qY0fwGH3vgxRxzjzzGUjc453IhiHtO2VNkRdJC0Uq0= Subject key identifier: 81:CB:E0:75:C9:7F:19:F6:4E:B6:7B:4D:BA:6F:E9:26:17:A0:44:D0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584890760B8F28BEAF64EF24E660 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/898b5fef-13fc-35eb-a5db-3c7042c1d13d.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 397227 IP address blocks: 156.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0b:8f:28:be:af:64:ef:24:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=3eafb2cf-c849-4f36-a632-62e2939054ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:89:b1:ab:7e:d5:34:b8:c9:8c:18:61:3e: b8:f3:a7:80:e8:c5:80:fa:8d:6a:a3:6f:34:5b:a9: 60:3e:ae:05:e5:7d:37:1d:86:c1:fc:3c:32:ea:c6: 35:01:c2:b2:09:a9:78:2c:ad:06:37:c6:61:b4:70: 4e:18:a3:21:47:15:9c:b3:75:d3:91:b3:65:c8:ef: ce:14:d7:62:cd:5c:3c:9d:9b:8c:27:cf:39:9a:07: ef:8e:92:cb:93:fa:1a:e6:5f:8f:35:4d:87:3f:55: 98:1e:a8:7b:9d:bc:4f:5b:a5:fe:74:3b:9a:25:17: 79:e4:6a:e7:f5:33:d7:2a:a4:38:46:1d:64:0c:c2: 15:ad:73:6e:cb:d9:7c:08:b6:f3:fe:c2:c5:fd:85: 4d:21:63:67:f5:49:67:96:e3:1f:13:1a:76:05:07: c8:c3:76:b8:01:fa:5a:8b:f8:0e:5e:44:6d:f8:55: 36:ff:1a:cc:93:f8:16:90:0f:af:a8:5d:e7:6e:8f: 7b:5d:02:16:8f:4e:4c:2c:3b:d4:c7:00:cb:25:6a: ca:68:4f:cd:91:28:91:62:ac:67:54:b8:6a:1b:56: eb:6a:99:6a:f9:1c:55:b7:8a:00:6a:7e:c7:69:83: f0:b1:ad:4d:46:6a:83:f9:e1:96:ff:42:2f:9d:dc: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CB:E0:75:C9:7F:19:F6:4E:B6:7B:4D:BA:6F:E9:26:17:A0:44:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/898b5fef-13fc-35eb-a5db-3c7042c1d13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:79:c5:e9:b2:e6:27:57:ac:db:e6:31:23:60:1f:a4:5e:6a: a5:59:c9:18:43:5a:b5:b0:dd:39:a3:e1:2b:62:e9:69:13:b7: 2f:cf:0f:5b:08:33:cf:6a:24:93:17:86:cd:e0:2f:e8:ad:66: db:73:ec:4f:e6:3a:d2:65:a5:91:b7:81:f9:9a:ed:56:c0:39: 1a:ab:44:03:f2:6a:b5:5c:9f:15:14:50:15:5c:31:59:b7:3b: 66:c2:92:9e:3b:29:1d:36:64:15:35:fb:f9:40:23:1e:95:eb: d8:24:26:d2:59:83:f1:ad:7e:fc:83:1d:f9:c9:ed:f4:42:b2: 84:78:61:cb:dc:9e:18:4a:5b:06:07:24:89:34:b1:eb:e2:70: a5:fc:a5:70:ba:72:b1:b7:52:13:57:1f:e2:6e:0d:e5:26:f3: c2:7a:07:f9:f0:ef:23:05:f6:e9:65:ef:58:2b:b4:d3:fc:bc: b5:ce:6f:b3:c8:dd:45:09:df:a0:c4:4e:8e:4d:34:c5:e1:d4: 66:72:5a:1e:c9:80:59:78:13:cd:d8:9f:f0:60:95:01:1f:27: 5f:93:9f:fa:91:8f:98:e3:82:d3:8c:b8:51:73:18:1f:9a:f4: 55:72:cf:79:63:ce:3d:08:2c:0d:bf:27:96:41:29:9f:07:47: 97:ea:5e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdguPKL6vZO8k5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk M2VhZmIyY2YtYzg0OS00ZjM2LWE2MzItNjJlMjkzOTA1NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0CJsat+1TS4yYwYYT6486eA6MWA+o1qo280 W6lgPq4F5X03HYbB/Dwy6sY1AcKyCal4LK0GN8ZhtHBOGKMhRxWcs3XTkbNlyO/O FNdizVw8nZuMJ885mgfvjpLLk/oa5l+PNU2HP1WYHqh7nbxPW6X+dDuaJRd55Grn 9TPXKqQ4Rh1kDMIVrXNuy9l8CLbz/sLF/YVNIWNn9UlnluMfExp2BQfIw3a4Afpa i/gOXkRt+FU2/xrMk/gWkA+vqF3nbo97XQIWj05MLDvUxwDLJWrKaE/NkSiRYqxn VLhqG1braplq+RxVt4oAan7HaYPwsa1NRmqD+eGW/0IvndwcGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHL4HXJfxn2TrZ7Tbpv6SYXoETQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODk4YjVmZWYtMTNmYy0z NWViLWE1ZGItM2M3MDQyYzFkMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt5xemy5idXrNvmMSNgH6ReaqVZyRhDWrWw3Tmj4Sti6WkTty/PD1sI M89qJJMXhs3gL+itZttz7E/mOtJlpZG3gfma7VbAORqrRAPyarVcnxUUUBVcMVm3 O2bCkp47KR02ZBU1+/lAIx6V69gkJtJZg/GtfvyDHfnJ7fRCsoR4YcvcnhhKWwYH JIk0sevicKX8pXC6crG3UhNXH+JuDeUm88J6B/nw7yMF9ull71grtNP8vLXOb7PI 3UUJ36DETo5NNMXh1GZyWh7JgFl4E83Yn/BglQEfJ1+Tn/qRj5jjgtOMuFFzGB+a 9FVyz3ljzj0ILA2/J5ZBKZ8HR5fqXgQ= -----END CERTIFICATE-----Generated at Sun Apr 6 07:01:44 2025 by rpki-client